IN THE CLAIMS : 

Please cancel claim 33 without prejudice. 

Please substitute the following claims for the pending claims 
with the same number: 



1 12. (currently amended) A method for limiting the operational life of software 

2 in a network environment, the method comprising: 

3 providing - • transmitting a program applet with a password 

4 embedded therewithin from a server computer to a client c omputer computer, via 

5 a network, the password having a limited operational life; 

6 receiving by the server computer, from said program applet at the 

7 client computer, via said- netw o rk network, ( i) a request for information stored in a 

8 restricted access storage area of-a the server compute r, and (iih 

9 automatically receiving by the server computer, from said 

10 program applet at the client comput err -said embedded password without manual 

11 entry of the password by a us e r, for authentication , when e ver said receiving 

13 authenticating said embedded password by the server computer 

14 and not by the program appl e t , whenever said receiving occurs; 

15 thereafte r providing transmitting said information from the server 

16 computer, to said program applet at the client computer, via said n e twork 

1 7 network, while said embedded password is valid; and 

18 invalidating said embedded password bv the server computer, 

19 coincident with an invalidation event 

1 13. (previously presented) A method according to claim 12 wherein said 

2 invalidating comprises invalidating said embedded password at a predetermined 

3 time. 

1 14. (previously presented) A method according to claim 12 wherein said 

2 invalidating comprises invalidating said embedded password after lapse of a 

3 predetermined time from when said request was received. 

1 15. (previously presented) A method according to claim 12 wherein said 

2 invalidating comprises invalidating said embedded password upon the detection 

3 of a loss of communication with said client. 
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l 16. (canceled) 

I 1 7. (canceled) 

1 18. (currently amended) A method according to claim 12 wherein said 

2 providing transmitting a program applet comprises generating said embedded 

3 password, 

1 27. (currently amended) A network-based software authentication system 

2 comprising a server computer, the server computer comprising: 

3 a password generator; 

4 password validation apparatus; 

5 a restricted-access storage area; 

6 a program applet; and 

7 invalidation apparatus; 

8 wherein said server computer is operative to: 

9 a) cause said password generator to generate a password, the 
10 password having a limited operational life; 

I I b) embed said password within said program applet, and provide 

12 transmit said program applet with said password embedded therewithin to a client 

13 computer via a network; 

14 c) receive from said program applet at the client computer, (i) a 

15 request for information-and J _and (ii) , whenever information r e quested is stored in 

16 the restricted access storage area, automatically receive said embedded password? 

17 from said program applet via said network, for authentication ^ without manual 

18 entry of the password by a us e r ; 

19 d) authenticate said embedded password using said password 

20 validation apparatus and not by said program applet , whenever information 

21 requested is stored in the restricted-access storage area; 

22 e) provid e transmit said information to said program applet at the 

23 client computer, via sai d n e twork network, while said embedded password is 

24 valid; and 

25 f) invalidate said embedded password using said invalidation 

26 apparatus coincident with an invalidation event. 
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1 28. (original) A system according to claim 27 wherein said invalidation event 

2 comprises the arrival of a predetermined time. 

1 29. (previously presented) A system according to claim 27 wherein said 

2 invalidation event comprises the lapsing of a predetermined time from when said 

3 request was received. 

1 30. (original) A system according to claim 27 wherein said invalidation event 

2 comprises the detection of a loss of communication with said client 

1 31. (canceled) 

l 32. (canceled) 

l 33. (canceled) 
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